Younggkid

z3

The Z3 Theorem Prover

mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

dafny

Dafny is a verification-aware programming language

pcm

Intel® Performance Counter Monitor (Intel® PCM)

gramine

A library OS for Linux multi-process applications, with Intel SGX support

Firework_Simulator

烟花模拟器，一个可以模拟各种烟花效果的网页|它可以展示各种绚丽多彩的烟花效果，并让人仿佛置身于真实烟花的绚丽世界之中。|模拟烟花|烟花网页|烟花绽放|烟花效果

PTEditor

A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.

drama

This repository contains examples of DRAMA reverse-engineering and side-channel attacks

flush_flush

This repository contains examples of Flush+Flush cache attacks

CacheQL

Research Artifact of USENIX Security 2023 paper: CacheQL: Quantifying and Localizing Cache Side-Channel Vulnerabilities in Production Software

sgxfun

SGX command-line tools and paper

linux-svsm

Linux SVSM (Secure VM Service Module) for secure x86 virtualization in Rust

svsm

COCONUT-SVSM

Mastik

anvil

Anvil is an experimental framework to build practical, formally verified, cluster management controllers.

governance

Confidential Computing Consortium Governance Documents

frameworks

Microarchitectural attack development frameworks for prototyping attacks in native code (C, C++, ASM) and in the browser

website-fingerprinting

Code supporting "Peek-a-Boo, I Still See You: Why Efficient Traffic Analysis Countermeasures Fail"

verismo

A formally verified security module for AMD confidential VMs

Microarchitectural-Hash-Function-Recovery

Proof-of-concept implementation for the paper "Efficient and Generic Microarchitectural Hash-Function Recovery" (IEEE S&P 2024)

cachequery

HW interface for memory caches

acai

Protecting Accelerator Execution with Arm Confidential Computing Architecture (USENIX Security 2024)

shadowbound

ShadowBound: Efficient Memory Protection through Advanced Metadata Management and Customized Compiler Optimization (USENIX Security 2024) ✨ Please give a star to https://github.com/cla7aye15I4nd/CAMP next door! 🌟😊

BI-SGX

Bioinformatic Interpreter with Intel SGX

elasticlave

PrimeProbe

LLCFeasible

Open source release of "Last-Level Cache Side-Channel Attacks Are Feasible in the Modern Public Cloud" (ASPLOS '24)

CacheZoom

obelix

Proof-of-concept implementation of the Obelix software hardening framework, based on LLVM.

Sense

Code for Sense (NDSS'24)